Overview

overview

7

Static

static

3

2026-08-04...at.exe

windows10-2004-x64

7

2026-08-04...at.exe

windows11-ltsc_2024-x64

7

Analysis

  • max time kernel
    151s
  • max time network
    152s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    04/08/2026, 07:47

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-08-04_332584089e9dd014af5451d2ee35b4a6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
  • Size 71.7MB
  • Sample260804-jmvanaal7v
  • SHA256 d4c34d9f7c78234940853f49affeb388d827aa5b9cb1fa9b103e49f771b4ef73
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 50 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of WriteProcessMemory 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-08-04_332584089e9dd014af5451d2ee35b4a6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-08-04_332584089e9dd014af5451d2ee35b4a6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:256
    • C:\Users\Admin\AppData\Local\Temp\2026-08-04_332584089e9dd014af5451d2ee35b4a6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
      C:\Users\Admin\AppData\Local\Temp\2026-08-04_332584089e9dd014af5451d2ee35b4a6_blankgrabber_coinminer_icedid_luca-stealer_njrat.exe
      2⤵
      • Loads dropped DLL
      • Suspicious behavior: AddClipboardFormatListener
      • Suspicious behavior: GetForegroundWindowSpam
      PID:4124

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        MSVCP140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\MSVCP140.dll
        • Size 544KB
        • SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        MSVCP140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\MSVCP140_1.dll
        • Size 30KB
        • SHA256 446c48c1224c289bd3080087fe15d6759416d64f4136addf30086abd5415d83f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtCore.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\PyQt6\QtCore.pyd
        • Size 2.4MB
        • SHA256 5a1c1a4c971e85ac004ca559dd6221dd407e75ebfb711d8303c53ec687d73ec9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtGui.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\PyQt6\QtGui.pyd
        • Size 2.1MB
        • SHA256 1f380190ec27c1f9ce4497380beccf80511a39467d57be4ad887ddbc162c0839
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        QtWidgets.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\PyQt6\QtWidgets.pyd
        • Size 4.8MB
        • SHA256 b0c2171ee0d405da88e6a9e94388561ce4aa827459f877329ce2d59537e25055
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sip.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\PyQt6\sip.pyd
        • Size 108KB
        • SHA256 4f9b530b045d07007b2bda07580c0ef031a973b8ebd577ae9f533fe52e2bb894
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Core.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\Qt6Core.dll
        • Size 5.8MB
        • SHA256 05982ff42ba7ae3074badaee1a09ff7f45e694de815bb06b514b28c28cfe0500
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Gui.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\Qt6Gui.dll
        • Size 8.6MB
        • SHA256 ced3aef690624b1186660baa85c7d2c3319d46f5c0194eeafe39e2377643e1d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Qt6Widgets.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\Qt6Widgets.dll
        • Size 6.3MB
        • SHA256 3fac74f2736ee0850657005ceade2a4edef6e97d58c764e77c2e39e629e04e82
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\VCRUNTIME140.dll
        • Size 117KB
        • SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        VCRUNTIME140_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\VCRUNTIME140_1.dll
        • Size 48KB
        • SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\_bz2.pyd
        • Size 82KB
        • SHA256 160b5218c2035cccbaab9dc4ca26d099f433dcb86dbbd96425c933dc796090df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\_ctypes.pyd
        • Size 122KB
        • SHA256 8250b4c102abd1dba49fc5b52030caa93ca34e00b86cee6547cc0a7f22326807
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\_lzma.pyd
        • Size 154KB
        • SHA256 b095fa2eac97496b515031fbea5737988b18deee86a11f2784f5a551732ddc0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _queue.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\_queue.pyd
        • Size 31KB
        • SHA256 bbe7736caed8c17c97e2b156f686521a788c25f2004aae34ab0c282c24d57da7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _socket.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\_socket.pyd
        • Size 81KB
        • SHA256 ce3090fff8575b21287df5fc69ae98806646fc302eefadf85e369ad3debad92b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _wmi.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\_wmi.pyd
        • Size 37KB
        • SHA256 b0ed1c62b73b291a1b57e3d8882cc269b2fcbb1253f2947da18d9036e0c985d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-8.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\libffi-8.dll
        • Size 38KB
        • SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        msvcp140_2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\msvcp140_2.dll
        • Size 188KB
        • SHA256 24b47c966b6e4a65b3e4df866d347d3427e9bd709be550c38224427eb5e143d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libopenblas64__v0.3.23-293-gc2f4bdbb-gcc_10_3_0-2bde3a66a51006b2b53eb373ff767a3f.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy.libs\libopenblas64__v0.3.23-293-gc2f4bdbb-gcc_10_3_0-2bde3a66a51006b2b53eb373ff767a3f.dll
        • Size 36.4MB
        • SHA256 57b87772bf676b5c2d718c79dddc9f039d79ec3319fee1398cc305adff7b69e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiarray_tests.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy\core\_multiarray_tests.pyd
        • Size 64KB
        • SHA256 d9017d99e0b6cad2f02462420793551fe9e6b836f3a800228caaeed144a32b75
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _multiarray_umath.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy\core\_multiarray_umath.pyd
        • Size 2.7MB
        • SHA256 5d4f44389d1b4e9aa62af63b716a0d4266dbb56fefa9bf27831f85b695994da5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _pocketfft_internal.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy\fft\_pocketfft_internal.pyd
        • Size 107KB
        • SHA256 f0a4df58721cb85ca35f5f3b8c47538c53d57bbcca4fc5c07a6c06ac4c5ef421
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _umath_linalg.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy\linalg\_umath_linalg.pyd
        • Size 104KB
        • SHA256 7652e82c6c53249b911dde9822b71a7ecbecbc699c79475862e779a51d7f1d0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _common.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy\random\_common.pyd
        • Size 162KB
        • SHA256 774bf3e20e2b1ca9797deb1daccb88a776a70c8555a501454d8d900a14585134
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bit_generator.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy\random\bit_generator.pyd
        • Size 157KB
        • SHA256 d335d1443e324a7a89582cc3e85bd850198eb3133c3dd38c7f55c6f609b0cfd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mtrand.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\numpy\random\mtrand.pyd
        • Size 569KB
        • SHA256 2df309f3cc66116966484fcc466cef200aff8d2a4c8ea482d3530b5cccb89394
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\python3.dll
        • Size 66KB
        • SHA256 d52baca085f88b40f30c855e6c55791e5375c80f60f94057061e77e33f4cad7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python312.dll
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\python312.dll
        • Size 6.6MB
        • SHA256 93488fa7e631cc0a2bd808b9eee8617280ee9b6ff499ab424a1a1cbf24d77dc7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\onefile_256_241421_ymbKip0Ocs0\select.pyd
        • Size 30KB
        • SHA256 dca5e6d39c5094ce599143cb82f6d8470f0c2a4ce4443499e73f32ed13333fd0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/4124-253-0x00007FFC72490000-0x00007FFC726B7000-memory.dmp
        Download

        memory/4124-250-0x00007FFC68100000-0x00007FFC6836B000-memory.dmp
        Download

        memory/4124-245-0x00007FFC69860000-0x00007FFC69D35000-memory.dmp
        Download

        memory/4124-244-0x00007FFC68950000-0x00007FFC68F99000-memory.dmp
        Download

        memory/4124-282-0x00007FFC610C0000-0x00007FFC63176000-memory.dmp
        Download